Musicbrainz Picard --> mp3Tag --> MusicBee

• Picard handles the initial tagging.
• mp3Tag handles the clean-up. I like things “just so”, and some of the time Picard goes rogue. The Actions function is super powerful for automating “fixing” tags. Oh, and you can cut, filter and paste an entire directory’s worth of song tags if you want to bulk remove a bunch of unwanted tags that Picard adds.
• MusicBee is the database. I like the Inbox feature that allows me to do a last check before “promoting” the files to my master library.

There are portable versions of all three, so you can lock a version in your music directory and never worry about updates ruining your tags.

I don’t do that for a living anymore

The answer is an SSH reverse tunnel. Have privoxy running in the rPi listening on localhost. Have it then connect to your home server via SSH with reverse tunnels enabled, tunneling the privoxy port. On your home server you run another instance of Privoxy that’s listening in your home network and proxy forwarding over the tunnel and you’re done.

I used to use this setup for pen testing.